The load_script function in fs/binfmt_script.c in the Linux kernel before 3.7.2 does not properly handle recursion, which allows local users to obtain sensitive information from kernel stack memory. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.
Information Disclosure
Linux
Linux Kernel
NVD
GitHub
Exploit-DB
CVSS 2.0
2.1
EPSS
0.6%
The Linux kernel through 3.7.9 allows local users to obtain sensitive information about keystroke timing by using the inotify API on the /dev/ptmx device. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.
Information Disclosure
Linux
Linux Kernel
NVD
Exploit-DB
CVSS 2.0
2.1
EPSS
0.3%